CVE-2021-45111

CVSS 7.1 HIGHEPSS 0.8%CWE-284

Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstration data, including user accounts with known credentials.

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Produtos afetados

Odoo · Odoo Community Odoo · Odoo Enterprise

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/odoo/odoo/issues/107683 https://www.debian.org/security/2023/dsa-5399